$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer File: AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.cer (raw, json) Hash identifier: YP+xjbUgeNhWeFWA4XZbTUeWcnUNafJcnX4eSjvNqvo= Subject key identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 655872E5059D201A1632D4D84234844F0C4B5402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft caRepository: rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 19 Jul 2025 00:17:21 +0000 Certificate not after: Sat 18 Jul 2026 00:22:21 +0000 Subordinate resources: IP: 103.16.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:58:72:e5:05:9d:20:1a:16:32:d4:d8:42:34:84:4f:0c:4b:54:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 19 00:17:21 2025 GMT Not After : Jul 18 00:22:21 2026 GMT Subject: CN=AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:05:f6:94:40:30:6d:1e:84:78:b0:60:fc: 8e:33:9d:aa:95:7a:ba:c3:3b:96:59:63:5c:26:94: a0:3b:81:44:72:d8:62:53:b0:1b:0b:fa:a9:23:84: 78:9a:5b:55:4a:86:9f:77:60:d1:2b:92:b7:5a:58: f3:07:fe:e4:72:89:ac:8e:70:03:63:9a:03:e1:87: 90:13:b2:68:16:75:33:d6:e8:71:c4:52:65:5b:c4: ca:93:da:a2:36:a1:3f:f9:00:f6:90:43:c7:4a:ed: 60:43:f8:e9:3d:8f:50:ef:55:70:dc:2f:3a:66:90: b0:6e:e9:a4:c3:d1:ec:a2:05:06:dd:9e:09:43:f3: 15:f6:5e:cc:ad:1d:6e:09:d0:7b:a0:18:b2:49:72: d4:a5:dd:b6:bb:cf:2b:c1:f0:47:e1:7c:ca:8b:7b: 2f:9a:29:ee:84:f6:df:cc:2f:ff:5a:bd:d9:c0:e9: 92:8f:e1:ab:62:f3:1a:03:36:a2:df:bc:04:1a:0b: e9:df:56:fa:9a:19:f4:08:75:b2:70:85:c2:01:f8: cf:c6:6e:8f:af:6a:20:b5:20:e7:15:04:18:19:d8: 75:b5:06:33:17:83:22:82:bd:49:97:d8:d0:87:9c: d6:6a:7d:cb:83:6e:e7:29:8c:a7:c2:74:da:15:0c: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:3C:3F:A1:D3:27:5E:28:4B:07:A8:4E:C9:50:85:DF:9B:C5:A2:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/19879744-b818-46dc-8d9f-9c35793f4cbb/0/AB3C3FA1D3275E284B07A84EC95085DF9BC5A22A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.118.0/23 Signature Algorithm: sha256WithRSAEncryption 66:a2:47:72:bc:f3:8e:73:cc:ca:04:e0:17:1e:f3:27:90:d1: 98:ad:29:56:cd:44:a2:cf:04:1c:99:88:8c:d3:eb:29:8f:59: dd:50:70:1e:58:7e:20:58:ab:f1:11:ad:28:c0:a5:b2:c7:c0: 46:79:ad:4f:fd:65:17:a0:17:e9:3f:d5:74:28:7a:20:6b:22: ce:1f:17:9b:47:05:35:b9:bd:54:30:8b:b6:c1:3a:ca:2e:6c: f0:f4:53:11:89:7a:28:31:09:10:4b:01:c8:04:09:c6:4d:b1: 4e:08:6e:3a:34:35:fe:3d:00:3e:af:b6:01:1c:56:ba:b1:fc: fb:e8:a3:4d:e1:51:a4:f0:d2:fd:6e:54:79:e3:36:77:ed:92: 1e:31:08:18:dd:a0:47:42:46:c5:a2:64:14:93:04:de:46:5f: bd:bf:1c:92:b4:ce:ec:72:36:92:e3:c3:5f:11:ff:07:93:86: cb:2b:d5:a5:6a:38:3c:10:07:73:d6:09:03:11:60:93:bc:32: 2e:c2:f8:d8:90:06:f4:9c:15:c1:c4:dc:f4:1c:d8:fe:25:0e: 8e:95:f4:30:9f:ee:21:3b:c6:c8:f0:90:54:fd:3b:f9:6d:e2: 1f:3c:09:63:b1:a4:57:e5:89:fe:fc:2e:ab:7e:e1:02:99:1a: 0e:b1:4d:94 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZVhy5QWdIBoWMtTYQjSETwxLVAIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxOTAwMTcyMVoX DTI2MDcxODAwMjIyMVowMzExMC8GA1UEAxMoQUIzQzNGQTFEMzI3NUUyODRCMDdB ODRFQzk1MDg1REY5QkM1QTIyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALztBfaUQDBtHoR4sGD8jjOdqpV6usM7llljXCaUoDuBRHLYYlOwGwv6qSOE eJpbVUqGn3dg0SuSt1pY8wf+5HKJrI5wA2OaA+GHkBOyaBZ1M9boccRSZVvEypPa ojahP/kA9pBDx0rtYEP46T2PUO9VcNwvOmaQsG7ppMPR7KIFBt2eCUPzFfZezK0d bgnQe6AYskly1KXdtrvPK8HwR+F8yot7L5op7oT238wv/1q92cDpko/hq2LzGgM2 ot+8BBoL6d9W+poZ9Ah1snCFwgH4z8Zuj69qILUg5xUEGBnYdbUGMxeDIoK9SZfY 0Iec1mp9y4Nu5ymMp8J02hUMSFMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKs8P6HTJ14oSweoTslQhd+bxaIqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOTg3OTc0NC1iODE4LTQ2ZGMtOGQ5Zi05YzM1NzkzZjRjYmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5ODc5NzQ0 LWI4MTgtNDZkYy04ZDlmLTljMzU3OTNmNGNiYi8wL0FCM0MzRkExRDMyNzVFMjg0 QjA3QTg0RUM5NTA4NURGOUJDNUEyMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnEHYwDQYJKoZIhvcNAQELBQADggEBAGaiR3K8845zzMoE4Bce8yeQ0ZitKVbN RKLPBByZiIzT6ymPWd1QcB5YfiBYq/ERrSjApbLHwEZ5rU/9ZRegF+k/1XQoeiBr Is4fF5tHBTW5vVQwi7bBOsoubPD0UxGJeigxCRBLAcgECcZNsU4Ibjo0Nf49AD6v tgEcVrqx/Pvoo03hUaTw0v1uVHnjNnftkh4xCBjdoEdCRsWiZBSTBN5GX72/HJK0 zuxyNpLjw18R/weThssr1aVqODwQB3PWCQMRYJO8Mi7C+NiQBvScFcHE3PQc2P4l Do6V9DCf7iE7xsjwkFT9O/lt4h88CWOxpFflif78Lqt+4QKZGg6xTZQ= -----END CERTIFICATE-----Generated at Sat Jul 26 14:51:26 2025 by rpki-client